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I Access agents (AA1-AA5) in nodes at the 
i-ANTWAN interface are formed into a group of 
access agents so that the access agents may be 
managed by the WAN as a group. The group 
must maintain group operation integrity in that 
if communications between agents in the group 
are broken, the access agents will coalesce into 
subgroups and continue performing communi- 
cation jobs as a group activity. Each of the 
access agents contains a finite state machine to 
perform the tasks of group formation and main- 
tenance. The formation of interconnected ac- 
cess agents into a group is accomplished by 
one access agent being identified as a group 
leader. All other access agents communicating 
with the group leader within the LAN may then 
Join the group. The maintenance of group 
activity integrity is accomplished by detecting a 
break in group communication integrity and 
thereafter refonming the group into multiple 
smaller groups. The maintenance of group 
operation integrity also includes the merger of 
small groups into a large group when a bridge is 
added between LAN segments. 
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CROSS REFERENCE TO RELATED PATENTS 

The present invention relates to the foliowing pa- 
tents which are specifically incorporated herein by 
reference: 

1. "Distribution Management Communications 
Network." Serial Number 07/900.647, filed June 
18. 1992. and 

2. "Maintenance of Message Distribution Trees in 
a Communication Network," Serial Number 
07/923.125. filed July 31. 1992. 

BACKGROUND OF THE INVENTION 

Field of the invention: 

This invention relates to the formation and main- 
tenance of groups of network-node access agents 
that interconnect a Local Area Network (LAN) with a 
Wide Area Network (WAN). More particularly, the in- 
vention relates to access agents cooperating with 
each otherto choose a group leader, or join as a group 
member. 

Description of Prior Art: 

Access agents are intelligent communication 
subsystems located In network nodes at the interface 
between a Local Area Network {LMij and a Wide 
Area Network (WAN). The access agents control the 
flow of communications between the LAN and the 
WAN. Typically, there is more than one network node 
and. thus, more than one access agent between a 
i-AN and a WAN. Also, a given LAN may be composed 
of multiple LAN segments connected by communica- 
tion bridges (links between LAN nodes in separate 
I-AN segments). Thus, there may exist multiple paths 
between a given LAN end station and an access 
agent in a network node at the LAN/WAN Interface. 

In the prior art, the access agents have been 
managed in such a way that communication work 
across the LAN/ WAN interface selected one access 
agent based on a predetermined criteria, such as 
cost. Once the optimum access agent for a given 
communication was selected, all other access 
agents, that could also be used to perform the same 
work, were blocked, or shut down. As a result, multi- 
ple communication jobs were queued and waited in 
line for the optimum access agent to handle them In 
turn. 

The problem with the prior art design is that It 
wastes the communication power available at the In- 
terface between the LAN and WAN. If the access 
agents could be managed in a manner to split the 
workload between multiple access agents, then mul- 
tiple communication jobs could be performed in par- 
allel, and the total communication workload complet- 
ed more quickly. However, this means that the access 
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agents must be formed Into a group, and each access 
agent In the group must be managed so that the ac- 
cess agents perform the total workload as a group 
with conrmiunication jobs being performed in parallel. 
5 To date, there are no communication systems having 
LAN/WAN access agents that are so formed and 
managed to perform total communication workload, 
i.e., multiple jobs, as a group. 

10 SUMMARY OF THE INVENTION 

It Is an object of this Invention to establish an en- 
vironment in a network for group management of ac- 
cess agents at a LAN/WAN interface. 

15 In accordance with this invention, the above ob- 

ject Is accomplished by organizing all access agents 
attached to a common L^N, including all connected 
I^AN segments, into an access agent group. More 
particularly, this is accomplished by forming all such 

20 access agents into a Multiple Access Group (MAG). 
In addition, the group must maintain group operation 
integrity In that If communications between agents In 
the group are broken, the access agents will coa- 
lesce Into subgroups and continue performing conv 

25 munlcation jobs as a group activity. 

The formation of interconnected access agents 
into a group is accomplished by one access agent be- 
ing identified as a group leader. All other access 
agents, that share I^AN and WAN connectivity with 

30 the git>up leader, may then join the group. 

The maintenance of group operation integrity is 
accomplished by detecting a break in group commu- 
nication integrity, and thereafter reforming the group 
as a single group or multiple subgroups. The break in 

35 group integrity may be caused by a group leader drop- 
ping out. by a breakdown in communication across a 
bridge between two LANs, or by a WAN splitting. In 
the latter two breatcs. the group will reform, or coa- 
lesce into subgroups, in the case of the group leader 

40 dropping out. the remaining access agents will select 
a new group leader and reform as a single group. The 
maintenance of group activity integrity also includes 
detecting the addition, or repair, of a bridge between 
LAN segments, and thereafter merging small groups 

45 in the LAN segments into a large group for the i-AN. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIGURE 1 1s an example of a LAN and WAN sys- 
50 tem in which the invention's group management of ac- 
cess agents Is used. 

FIGURE 2 Is a chart to illustrate the organization 
of the finite state machine table in FIGURE 3 and the 
interrelation of FIGURE 3 table to tables In FIGURES 
55 4 through 12. 

FIGURE 3 is a finite state machine table and il- 
lustrates the preferred embodiment of the invention 
implemented as a finite state machine in each of the 
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access agents. 

FIGURE 4 is a table of inputs to the finite state 
machine. 

FIGURE 5 is a table of conditions that are also in- 
puts to the finite state nnachine. The Inputs of FIG- 
URE 4 and the conditions of FIGURE 5 combine, as 
shown in FIGURE 3, to cause actions and changes of 
state by the f mite state machine. 

FIGURE 6A is a table of definitions for the states 
of the state machine. 

FIGURE 6B is a table of definitions for the WAN 
group management services. 

FIGURE 6C is a table of definitions for the local 
variables stored at each access agent and used by its 
finite state nnachine. 

FIGURES 7-12 are tables of action codes called 
for in the finite state machine of FIGURE 3, and the 
actions performed by the state machine when that 
code is called. 

FIGURE 13 illustrate the logic/flow performed by 
finite state machines in the access agents to form a 
group of access agents. 

FIGURES 14A-14D show the logic/flow per- 
formed by finite state machines in the access agents 
to maintain group operation integrity when the bridge 
between 1-AN segments break. 

FIGURES 15A and 15B show the logic/flow per- 
formed by finite state machines In the access agents 
when a bridge between LAN segments is repaired, or 
added, requiring the merger of two groups Into a sin- 
gle large group of access agents. 

FIGURES 16A-16D show the logic/flow per- 
formed by finite state machines in the access agents 
to maintain group operation integrity when the WAN 
connected to bridged t^AN segments splits into two 
WANs. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

In FIGURE 1 . there is an example of multiple LAN 
segments connected to WAN 10. In accordance with 
this invention, the Access Agents (AAs) connected to 
the same LAN. including bridged LAN segments, will 
form themselves into and maintain themselves as a 
Multiple Access Group (MAG). 

Each of the Access Agents (AAs) are located In 
a network node at the interface to a LAN. A network 
node may have more than one AA. In each LAN. there 
are multiple end nodes ENs. and each end node con- 
tains a Media Access Control (MAC) that connects 
the end node communication device to the communi- 
cation media. For example, the communication me- 
dia may be a token ring network, as shown in FIGURE 
1 . an APPN network, or an Ethernet network. The 
end nodes may be terminals, personal computers, 
hosts, work stations. LAN servers, etc. 

Network nodes NN1 and NN2 contain access 



I8 674A1 4 

agents AA1 and AA2 for LAN segment 12. Network 
node NN3 contains two access agents AA3 and AA4 
for LAN segment 14. LAN segment 12 and LAN seg- 
ment 14 are connected to each other by bridge 16. Ac- 

5 cordingly, end nodes EN1-EN5 can t>e connected to 
WAN 10 through any of the access agents AA1-AA4. 

Access agents AA1-AA4 will be grouped as four 
AAs in a multiple access group (MAG) for bridged 
LAN segments 12 and 14. LAN 18 has three end 

10 nodes, EN6-EN8. and two access agents, AAS and 
AA6. Access agents AAS and AA6 would be formed 
into a second MAG attached to WAN 10. 

Structure of Invention: 

15 

Each of the access agents can be a micropro- 
cessing system programmed to communicate with 
other access agents to form, and maintain, a Multiple 
Access Group (MAG). Alternatively, for high speed, 

20 the access agents could have combinatorial logic to 
perform the program processes necessary to set up 
and maintain the MAG. In the preferred emt>odtment 
of the invention, the access agents contain mixed 
structure — logic and microprocessor. The high vol- 

25 ume tasks of the invention would be performed by 
combinatorial logic, and the tower volume tasks would 
be handled by a programmed microprocessing sys- 
tem. In either case, the functions and tasks per- 
formed by the invention are detailed in the finite state 

30 machine table, shown in FIGURE 3, in accordance 
with the definitions In supporting tables in FIGURES 
4-12. 

The organization of the Finite State Machine 
(FSM) table in FIGURE 3 is illustrated in FIGURE 2. 

35 The top-most row In the FSM table Identifies the col- 
umns. The left-most column contains the inputs and 
conditions that will cause a change in state. After the 
input/conditions column, the other six columns iden- 
tify the states of the state machine, whether embod- 

40 led in a programmed microprocessor, combinatorial 
logic or t>oth. The six states are reset, negotiate, 
pending, merge, assigned, and MAA (Monitor Access 
Agent). 

In each state column, the row contains the action 
45 code Ax, and the state number SNy of the next state 
when the input and conditions for that row have been 
satisfied. For example, if the state machine in an ac- 
cess agent is in State 3, and the input is iHBTimer (de- 
scribed hereinafter), the column/row entry is 4(A11). 
so In other words, action code is All, and the next state 
is State 4. If the column/row entry in the FSM con- 
tains It indicates no change in state, and If it con- 
tains "(-)", it indicates no action to be taken. For ex- 
ample, in State 2. Pending, if IHBTimer signal occurs. 
65 the column/row entry is "-(-)" which indicates no ac- 
tion to be taken, and no change in state. 

Some column/row entries in the finite state nra- 
chlne table of FIGURE 3 contain V . The T indicates 
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an error condition. For example, when an access 
agent is in State 0. the receipt of an input message. 
iHNeg under conditions C1. C2 or C5, is an error. 

FIGURE 2 is also a map illustrating the relation- 
ship of other figures to the finite state machine table 
in FIGURE 3. The ilNPUTs are defined in FIGURE 4. 
The conditions Cx are defined In FIGURE 5. FIGURE 
6A defines the six states for the finite state machine. 
FIGURE 6B defines services provided by WAN Group 
Management that may be called upon by the finite 
state machine. FIGURE 6C defines the local vari- 
ables stored in, and used by, an access agent and 
also indicates the initial values for these variables. 
FIGURES 7-12 define the functions of the action 
codes Axx. The action codes are organized in FIG- 
URES 7-12 by the acth^ity associated with the input 
message they relate to. For example, FIGURE 8 re- 
lates to activity associated with the input IHBTImer 
(heart beat timer), while FIGURE 10 relates to activ- 
ity associated with the input iHNeg (hello negotiate). 

In the Action Code Tables, the following nomen- 
clature is used, "v" as the first letter In the name of a 
variable indicates it is a variable in the access agent 
executing the process flow. If there is no first letter 
"v", the variable is input information from another ac- 
cess agent "Leave" refers to notifying the WAN that 
the access agent sending the "Leave" is no longer a 
member of a MAG (Multiple Access Group) identified 
In the Leave message. "Join" refers to notifying the 
WAN that the access agent sending the 'Join* is now 
a member in the MAG identified in the Join message. 
Other terms and expressions used in the Action Code 
Tables will be dear from the following description of 
the operation of the invention. 

Operation of Invention: 

in describing the operation of the invention, it 
should be noted that the labels for the access agents 

(AA1 , AA2, AA3 ) also denote their addresses, and 

the addresses increase with the access agent lat>et 
(AA1 <AA2 <AA3 ....). Also, note that the communica- 
tion between access agents as described hereinafter 
takes place on the LAN side of the interface unless 
the communication is described as being on the WAN 
side. 

The first task of the invention is to form access 
agents connected to a given LAN into a group. The 
finite state machine in each of the access agents 
AA1-AA4 (FIGURE 1) follows a process flow, as 
shown in FIGURE 13. The process flow in FIGURE 13 
assumes the state machine in one access agent pow- 
ers up first, and asserts itself as group leader or MAA 
(Monitor Access Agent) before any other access 
agent powers up. The process for negotiating con- 
flicts between two or more access agents that assert 
themselves as MAA will be described hereinafter. 

Referring to FIGURES 3 and 13, we will assume 



that access agent AA1 powers up first. The finite 
state machine in AA1 starts in State 0, Reset During 
power up, the iReset message will be generated. 
When this message Is receh^ed in operation 20. AA1 

5 executes action code AGO which resets all of AAl's 
variables, and starts the Keep Alh^e Timer (KATimer). 
AA1 listens for Hello messages from other access 
agents in operation 22, but the assumption in FIG- 
URE 1 3 is that AA2-AA4 have not yet powered up. Ao- 

10 cordingly, there is no iHMAA (Hello.MAA) message 
received, and decision 24 branches process flow to 
decision 26. Decision 26 tests for expiration of the 
Keep Alive Timer. If KATimer has not timed out, proc- 
ess flow returns to listen 22. This loop through 22, 24 

15 and 26 will continue until KATimer times out (several 
seconds), and flow from decision 26 branches Yes. 

After KATimer expires, the iKATimer message is 
received by the finite state machine (FSM). The FSM 
(FIGURE 3) is in State 0. and KATimer has expired 

20 with the variable vRounds < cMinRounds; therefore, 
the FSM performs action A20 and switches to State 
1 . (The variable vRounds is a count of the number KA- 
Trmer expirations. The constant cMinRounds is a 
constant threshold value for a set number of KATimer 

25 expirations.) In action A20 (FIGURE 9), the FSM re- 
sets all variables in AA1. starts both the HBTimer 
(heart beat timer) and the KATimer. and sends a Het- 
lo.Negotiate message (IHNeg). The iHNeg is a flag 
message to other access agents that AA1 is negotiat- 

30 ing for the group leader position. 

Decision 28 tests for expiration of the heart beat 
timer (HBTimer). The HBTimer times out in approxi- 
mately 6ne second. Each time HBTimer expires, de- 
cision 28 branches Yes and the FSM (FIGURE 3), be- 

35 ing in State 1 , goes to action A10 (FIGURE 8). In ac- 
tion A1 0, AA1 sends another iHNeg message and re- 
starts the HBTimer. If the HBTimer has not expired, 
decision 28 branches to decision 30 that tests for ex- 
piration of the KATimer. If the KATimer has not ex- 

40 pired. the process flow loops back to decision 28. If 
KATimer has expired, decision 32 tests whether the 
vRound exceeds cMinRound; i.e.. the number of KA- 
Timer expirations exceeds a given threshold value. If 
the threshold has not been exceeded, FSM (FIGURE 

45 3) goes to action A21 (FIGURE 9). Action A21 incre- 
ments the vRound variable by one, and restarts the 
KATimer. Loops through decisions 28 and 30 contin- 
ue until decision 32 Is satisfied indicating the KATi- 
mer expirations have exceeded the threshold value. 

50 The FSM (FIGURE 3) performs action A23 (FIGURE 
9), and switches to State 5. In action A23, the HBTh 
mer and KATimer are restarted, and the IHMAA mes- 
sage is sent with the vMembership List In effect. AA1 
has said, "I'm group leader and here is the list of group 

55 members." 

At this point there is only one member AA1 who 
is also group leader. This is because the assumption 
in FIGURE 13 was no other AAs had powered up until 
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AA1 had becom group leader. Now, after AA1 is 
group leader, as AA2, AA3 and AA4 power up. they go 
through the process in FIGURE 13. However, now at 
every heart beat interval, there wiil be an iHMAA 
message on the LAN from AA1. This is because AA1 
is in State 5 and each time the HBTImer expires OHB- 
Timer input), the FSM in AA1 performs action A12 
(FIGURE 8). 

The FShAs in AA2. AA3 and AA4 wiil hear a Hello 
message at operation 22 in FIGURE 13. and decision 
24 will branch Yes to decision 25. Decision 25 tests 
that the vMAA address stored in the current AA is 
greater than the MAA address received in the Hetio 
message from AA1. At power-on or reset, the vMAA 
address for an access agent is set to a maximum 
number. Therefore. AA2. AA3 and AA4 wili alt have 
the maximum number stored as the vMAA address. 
The iHMAA message will contain the real address for 
AA1 which will be less than the maximum. Thus, de- 
cision C6 will branch Yes. Each FSM in AA2-AA4 will 
perform action A50 and switch to State 4. Action A50 
(FIGURE 12) saves the variables in the Hello mes- 
sage from AA1, sends the Join message with the 
Groupid (group identification) to the WAN, sets the 
vMember variable to true (current AA is now a mem- 
ber of a group), and restarts the KATimer in the AA. 
In this manner, AA2. AA3 and AA4 join AAl's MAG 
(Multiple Access Group). 

Once the MAG is formed, the task of the AAs is 
to maintain group operation integrity; i.e.. to continue 
to operate as a group in response to service requests 
from the LAN or WAN. A number of events can break 
group integrity. In FIGURE 14A. one of these events, 
bridge 16 breaking, is shown. With bridge 16 down, 
end nodes in LAN segment 12 can no longer connect 
to access agents AA3 and AA4. Likewise, end nodes 
in t^AN segment 14 can no longer connect to access 
agents AA1 and AA2. AA1 and AA2 can no longer 
communicate with AA3 and AA4 over the LAN. 

To maintain group activity, the access agents 
need to reform into two groups or subgroups. The 
flow diagrams in FIGURES 14B, 14C and 14D illus- 
trate the process performed by the finite state ma- 
chines in AA1, AA2, and AA3 and AA4, respectively, 
as the access agents broken as a large group coa- 
lesce into two smaller groups. In FIGURE 14B. the 
group leader AA1 sees the group reduced by two. In 
FIGURE 14C. AA2 sees the group reduced by two 
also, in FIGURE 14D, AA3 and AA4 lose their group 
leader, and contend with each other to become the 
new group leader of a group containing just AAS and 
AA4. 

in FIGURE 14B, AA1 is in State 5 as group leader. 
Decision 34 tests for expiration of the HBTImer. When 
it expires, the Finite State Machine (FSM, see FIG- 
URE 3) performs action A12 (FIGURE 8). In action 
A 12, decision 36 tests for a membership change mes- 
sage from the set manager In WAN 1 0. The set man- 



ager is described in copending commonly assigned 
patent applications. Serial Number 07/900.647. enti- 
tled "Distribution Management Communications Net- 
work." and filed June 18. 1992, and Serial Number 
5 07/923,125. entitled "Maintenance of Message Dis- 
tribution Trees in a Communication Network." and 
filed July 31, 1992. which are hereby incorporated by 
reference. If a membership change message has 
been recen^ed. operation 38, by the FSM in AA1. in- 
fo eludes start HBTImer. Update vMembership List, 
send IHMAA, and send vMembership List. In other 
words, AA1 puts a message on its attached LAN (now 
single segment LAN 12) that it is the leader, and the 
members of its group are AA1 and AA2. 
f 5 In FIGURE 14C. AA2 is in State 4 as an assigned 

member of AAVs group. In operation 42, the Finite 
State Machine (FSM) in AA2 receives the IHMAA 
message and the Membership List from AA1. The 
FSM (FIGURE 3) input is iHMAA with condition C7 
20 and. therefore, the FSM performs action A55 (FIG- 
URE 12). In action ASS. the FSM restarts the KATi- 
mer, updates the vMembership List in AA2 with the 
Membership List received from AA1. AA2 stays in 
State 4. 

25 FIGURE 14D shows the process followed by the 

Finite State Machine (FSM) in each of the access 
agents AA3 and AA4. When the KATimer expires; as 
detected by decision 44. it means that AAS and AA4 
have not received an IHMAA. group leader message. 

30 as did AA2 in FIGURE 14C for the time interval of the 
Keep Alive Timer. Normally, they would receive the 
iHMAA each interval of the HBTImer. The FSM goes 
to action A22 where it resets the vRounds count to 
zero, restarts the KATimer and HBTImer and sends 

35 the iHNeg (Hello Negotiate) message. This happens 
in both AAS and AA4; I.e., both access agents ask to 
be group leader. 

Decision 46 tests for receipt of an IHNeg mes- 
sage. If the message has been received, decision 48 

40 compares the AA address in the IHNeg message with 
the address of its own AA. vAA address. This is the 
conflict resolution process between AAs requesting 
to be group leader at the same time. The rule is the 
AA with the lowest address becomes group leader. 

45 Other rules for ranking the access agents, such as 
highest address wins, might be used. Since AAS has 
the lower address (3 < 4), the condition NOT C5 is 
satisfied. AA4 loses, and its FSM (FIGURE 3) per- 
forms action A32 (FIGURE 10). start Timers, and 

so switches to State 2. In State 2. AA4 waits to receive 
(50) an iHMAA (from AAS) and when It does, its FSM 
performs action A51. In action A51, the variables in- 
formatbn received in the IHMAA are saved by AA4 as 
its variables v. AA4 sends a Join the group message 

55 to the WAN indicating it is joining AA3*s group, and 
AA4 starts its KATimer. 

Since AAS's FSM wins the conflict resolution at 
its decision 48, the process flow in AA3 proceeds to 
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decision 52. The process loops through decision 52, 
decision 54. action A21. decision 56. action AID. and 
back to decision 46.- in each l-tBTimer interval in this 
loop, AA3 sends another \HUeg (IHello.Negotiate) 
message. When the KATimer has expired the number 
of times that exceeds the preset threshold, the proc- 
ess flow branches Yes at decision 54. The FSM then 
performs action A23 (FIGURE 9) and switches to 
State 5. AA3, in action A23, has assumed the role of 
group leader by restarting the timers, sending the iH- 
MAA message and the vMembership List for the 
group. This completes the formation of two groups, 
AA1 -AA2 and AA3-AA4, resulting from the splitting of 
the bridged LAN into two I^ANs. 

The group management system must also handle 
the reverse situation where a bridge is repaired be- 
tween two LAN segments, or a bridge is added be- 
tween two LAN segments. Assume that two access 
agents AA1 and AA2 are an existing group in LAN 
segment 12 (FIGURE 1), and access agents AA3 and 
AA4 are an existing group in LAN segment 14. AA1 
and AA3 are the respective group leaders. Now 
bridge 16. between UVN segments 12 and 14. is add- 
ed or repaired. The group management system will 
reform the AAs into the large group AA1, AA2, AA3 
and AA4. with AA1 as group leader. FIGURES ISA 
and 15B illustrate the logic/flow for the FSMs In the 
respective AAs. 

In FIGURE ISA, AA1 and AA3 start out in State 
5 as group leaders. Bridge 16 now connects their two 
groups, and they begin receiving each others IHMAA 
message. They must resolve the conflict and leader- 
ship for the new larger group by one of them assum- 
ing the role of a member of the group rather than 
group leader 

The FSM in AA1 , in operation 35, receives the IH- 
MAA message from AA3. Decision 37 tests for Con- 
dition 6 (C6) which is whether the vMAA Address of 
AA1 is > the MAA address in the received IHMAA. 
Since the iHMAA came from AA3 and the vMAA ad- 
dress is for AA1, vMAA address is < the IHMAA ad- 
dress and C6 is not satisfied at decision 37. There- 
fore, FSM (FIGURE 3) in AA1 performs action A56, 
and stays in State 5. In action A56, AA1 again sends 
its iHMAA message; i.e., it Is still the group leader. 

The FSM in AA3 receives the IHMAA from AA1 in 
operation 35. At its decision 37, the C6 condition is 
satisfied, and the FSM performs action A54 and 
changes to State 4. In action A54. AA3 invokes the 
group management merge operation. That operation 
tests whether the group ID of the new group is differ- 
ent from AA3's previous group ID. If the group ID'sare 
different. AA3 sends to members of his old group IH- 
Merge. with the new variables containing information 
about the new group. If the group ID's are not the 
same, AA3 leaves its old group, and joins the new 
group now lead by AA1. In both cases, AA3 saves the 
information in the iHMAA message as its local vari- 



ables v. Last, as a part of action A54, AA3 starts the 
KATimer. 

in FIGURE 15B. AA2 and AA4, which are in State 
4, merge with the new larger group. AA2, which was 

5 already in a group with AA1, changes groups In the 
sense of moving from its older snrtall group to the new 
large group. AA4, which was in a group with AA3. 
changes to the new group leader. The FSMs in AA2 
and AA4, at operation 39. receive the IHMAA mes- 

10 sage from AA1. At deciston 41, condition C6 (dis- 
cussed above In reference to FIGURE 15A) is satis- 
fied for AA4. and not satisfied for AA2. in other words, 
the Monitor Access Agent (AA1) stays the same for 
AA2 but has changed for AA4. 

15 From decision 41. the FSM In AA2 goes to deci- 

sion 60 that tests whether the vMAA.address stored 
in AA2 matches the MAA.address in the received iht- 
MAA message. In AA2's case, there is a match since 
AA1 Is still its group leader. The FSM then performs 

20 action ASS. In action A55, AA2 receives the member- 
ship list for the new group, and then starts the KATh 
mer. AA2 stays in State 4. 

From decision 41, the FSM In AA4 performs ac- 
tion A53, and goes to State 3. In action A53, the FSM 

25 saves the IHMAA message contents, including 
MAA.address (new group leader address), in tempor- 
ary storage, and restarts the HBTimer. In State 3. 
AA4 is In the Merge state, and must now merge into 
the new group. 

30 AA4, at decision 43. tests for expiration of the 

HBTimer If the HBTimer has not expired, decision 45 
tests for receipt of IHMerge from AA3 (FIGURE 1 5A). 
If there Is no IHMerge message, the flow loops back 
to decision 43. If the iH Merge message has been re- 

35 ceived. decision 47 tests for whether the MAA ad- 
dress in the IHMerge message Is the same as the 
vMAA.address of the new I eader Just temporari ty stor- 
ed by AA4 during action AS3. if the answer is no, the 
IHMerge message is not from AA3 (see FIGURE 

40 1 5A). and the FSM flow returns to decision 43 testing 
HBTimer expiration. This loop for AA4 will continue 
until the MAA.address in IHMerge matches the 
MAA.address of the new leader or until the HBTimer 
expires. If the HBTimer expires, then the FSM In AA4 

45 performs action A1 1 . in A1 1 , the FSM leaves the old 
group, saves as its variables the information for the 
new group from the IHMAA. and Joins the new group. 
The FSM for AA4 then goes to State 4, 

if the answer is yes, the FSM in AA4 performs ao- 

50 tion A43. In A43. the FSM saves as the local variables 
the information on the new group that was contained 
in the IHMerge message frc>m AA3 (FIGURE 15A). 
The FSM then restarts the KATimer, and returns to 
State 4. AA4 is now a member of the new group with 

55 a new group leader. 

This completes the transition from two small 
groups to a larger group when two LAN segments are 
bridged. 
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The group management system must also main- 
tain group operation integrity in the event the group 
leader fails. If AA1 . the current group leader, were to 
fail, each of the other AAs would sense the tack of an 
IHMAA message during a keep alive timer interval. In 
other words, an IHMAA nr>essage with a Condition C7 
Is required in State 4 (see FIGURE 3) to restart the 
KATimers in each assigned AA When the KATlmer 
times out because there has t»een no iHMAA, they 
will send an IHNeg message to begin the negotiation 
for position as group leader. In effect, each of the 
AA2, AA3 and AA4 will follow the logic/flow in FIG- 
URE 14D, previously described, until the process 
chooses a new group leader. Since AA2 has the low- 
est AA address, it will emerge as the new group lead- 
er. 

The group management system must also main- 
tain group operation integrity in the event the WAN 
splits for any reason. This situation is illustrated in 
FIGURE 16A. The AAs in a large group AA1-AA4 are 
now separated on the WAN skle of their communica- 
tions. AA1 and AA2 can still communicate with AAS 
and AA4 though LAN segments 12 and 14. and bridge 
16. However. WAN 10 has now split into two WANs. 
1 0A and 10B, so there is no communication between 
AA1-AA2 and AA3-AA4 via nodes in the WAN. There- 
fore, it is necessary to form two small groups from the 
previous larger single group of AAs. 

The affect of the WAN split on the group manage- 
ment system is similar to bridge 16 failing between 
LAN segments 12 and 14. which was previously de- 
scribed with reference to FIGURES 14A-14D. FIG- 
URES 1 6B-16D are the same as FIGURES 14B-14D, 
except additional operations have been added to 
handle the condition C8 used in a WAN split. 

Condition C8 requires the WAN id, stored as a va- 
riable by the current AA, to be the same as the WANid 
received in a Hello message from another AA If the 
WANid's are not the same, the two AAs are in differ- 
ent WANs; i.e.. the WAN has split Since FIGURES 
16B-16D are substantially the same as FIGURES 
14B-14D, only the differences in the figures will be 
described. 

In FIGURE 16B. the FSM in AA1 is in State 5 as 
AA1 is the group leader before the WAN split. Deci- 
sion 49 tests for receipt of an iHMAA message. If such 
a message is received, decision 51 tests for whether 
the message came from an AA with the same WANid; 
i.e.. condition C8. If the WANid is the same, the FSM 
has to deal with a conflict between two AAs claiming 
to be group leader. The logic/flow to resolve such a 
conflict is described above in reference to FIGURE 
1 5A If the WANid's are not the same, AA1 knows the 
WAN has split, and it is necessary to reform the AAs 
into two groups. The logic flow proceeds from deci- 
sion 51 to decision 34 which tests for expiration of the 
HBTimer. The flow in FIGURE 168 is then the same 
as the flow described above for FIGURE 14B. 



In FIGURE 1 6C, AA2 is in State 4 as it is assigned 
to AA1 's group. When the FSM in AA2 detects receipt 
of an IHMAA message in operation 42. it checks the 
WANid in that message at decision 53. If vWANid in 

5 AA2 matches the WANkl in the message, the FSM 
proceeds to action ASS previously described. If the 
WANid's do not match, AA2 takes no action and stays 
in State 4. No match would indicate the iHMAA came 
from an AA attached to another WAN, and AA2 would 

10 not be a part of that AA's group. 

In FIGURE 16D, AA3 and AA4. which were in 
State 4 assigned to AA1. must form a new group and 
select a new group leader since they are in a WAN 
10B (FIGURE 16A}. if the KATlmer has not expired. 

IS the FSMs in AA3 and AA4 test for receipt of an IHMAA 
message at decision 55. If such a message has been 
received, decision 57 tests for whether the WANid in 
the message matches the vWANid stored in AA3 and 
AA4. respectively. If there ts a match, the FSM would 

20 perform action ASS. If the iHMAA comes from AA1. 
which now has a new WANid. there will be no match, 
and the logicfflow of the FSM for AA3 and AA4 re- 
turns to State 4 until the KATlmer expires. 

Decision 44 detects expiration of KATlmer, and 

25 the FSMs in AA3 and AA4 perform action A22. AA3 
and AA4 are now In the negotiation state, as prevh 
ously described in FIGURE 14D. The negotiation op- 
eration in FIGURE 16D differs in that decision 59 has 
been added to check the WANid in any received Hel- 

30 lo.Negotiate message. This is necessary since bridge 
1 6 might pass an IHNeg message from an AA attach- 
ed to WAN 1 0A (FIGURE ISA). If the WANid's do not 
match, the FSM loops back to decision 46 (only AAs 
with the same WANid can contend for group leader- 

35 ship or be in the same group). 

If the WANid*s match, decision 48 tests for con- 
dition CS to resoh^e the conflict in group leadership 
between AA3 and AA4. AA3's path and AA4's path 
and operations are unchanged from FIGURE 14D. 

40 except that in the AA4 path, the FSM checks the WA- 
Nid at decision 61 when an iHMAA is received. This 
is necessary since bridge 16 (FIGURE 16A) might 
pass the IHMAA from AA1. Otherwise, as described 
before in FIGURE 14D, AA3 completes its path and 

45 becomes group leader (State 5). and AA4 completes 
its path and joins AA3'8 group (State 4). 



Claims 

so 

1. For use in a LAN/WAN communication system 
having multiple access agents at the LAN/WAN 
interface, a cooperative method for use by eadi 
of the access agents so that the access agents 
55 form and maintain the access agents conrunon to 

a LAN into a group for operative use as a group 
by the communicatk>n system, said method in 
each access agent comprising the steps of: 
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negotiating for leadership of the group with all 
other access agents coinmon to the LAN; 
resoh/Ing conflicts in negotiation and assuming 
the rote of group leader or the role of member of 
the group; and 

maintaining group operation Integrity after the 
group has been formed whereby the communica- 
tion system may manage the access agents as 
a group. 

2. The method of daim 1 wherein said step of ne- 
gotiating comprises the steps of: 

testing whether or not a group leader message 
has been received from another access agent in 
a predetermined interval of time; and 
sending a negotiation message on the LAN to the 
other access agents If a group leader message 
has not been received. 

3. The method of claim 2 wherein said step of re- 
soh^lng conflicts comprises the steps of: 
testing whether the negotiation message from 
another access agent indicates the other access 
agent has a higher rank than the current access 
agent; 

sending a group leader message if the current 
access agent has a higher rank; or 
sending a merge message if the current access 
agent has a lower rank. 

4. The method of claim 1 wherein said maintaining 
step comprises the steps of: 

testing whether or not a group leader message 
has been received from another access agent in 
a predetermined interval of time; 
sending a negotiation message on t he LAN to the 
other access agents if a group leader message 
has not been received; 

testing whether a group membership change has 
occurred if a group leader message is received; 
updating the group membership list in the current 
access agent If group membership has changed; 
and 

sending a negotiate message if a group leader 
message has not been received. 

5. The method of dalm 3 wherein said step of re- 
solving conflicts comprises the steps of: 
testing whether the negotiation message from 
another access agent indicates the other access 
agent has a higher rank than the current access 
agent; 

sending a group leader message if the current 
access agent has a higher rank; or 
sending a merge message if the current access 
agent has a tower rank. 

6. The method of daim 1 wherein said step of ne- 
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gottatlng comprises the steps of: 

testing whether or not a group leader message 

has been received from another access agent in 

a predetermined interval of time; 
5 testing, If a group leader message is received, 

whether the group leader message comes from 

an access agent attached to the same WAN as 

the current access agent; and 

sending a negotiation message on the LAN to the 
10 other access agents if a group leader message 

from an access agent on the same WAN has not 

been received. 

7. The method of claim 6 wherein said step of re- 
ts solving conflicts comprises the steps of: 

testing whether the negotiation message from 
another access agent indicates the other access 
agent has a higher rank than the current access 
agent; 

20 testing whether the negotiation message comes 

from another access agent on the same WAN as 
the current access agent; 
sending a group leader message if the current 
access agent has a higher rank and is on the 

25 same WAN; 

sending a merge message if the current access 
agent has a lower rank and is on the same WAN; 
and 

testing whether the group leader message was 
30 from an access agent connected to the same 

WAN as the current access agent. 

8. In a LAN/ WAN communication system with net- 
work nodes at the LAN/WAN interface having ac- 

35 cess agents, each access agent for managing 

communications across the interface for its net- 
work node, said system having a group manage- 
ment system for managing conrimunications 
through multiple access agents as a group, ap- 

40 paratus in each of said access agents for organ- 

izing said access agents common to a LAN into 
multiple access group, said apparatus compris- 
ing: 

means for sending a negotiate message to nego- 
45 tiate for leadership of the access group; 

means for listening for negotiate message from 
other access agents in the access group; 
monitor means in response to no other negotiate 
messages within a predetermined time interval 
60 for daiming group leadership by sending a group 

leader message; and 

means responsh/e to a group leader message for 
joining the group. 

55 9. The apparatus of claim 8 and in addition: 

means for detecting a change in access group 
membership; and 

means responsive to a change in access group 
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membershipfor reforming the access agents Into 
one or more new access groups. 

10. The apparatus of daim 9 wherein said reforming 
means comprises: 

said monitor means for sending a group leader 
message with a new group membership list; and 
means for receiving the group leader message 
from said first group means and updating the 
membership list 

11. The apparatus of daim 9 wherein said reforming 
means comprises: 

means in response to no group leader message 
from said monitor means for sending a negotiate 
message to negotiate for leadership of access 
agents In a second group not receiving a group 
leader message; 

means for listening for negotiate message from 
other access agents In the second access group; 
monitor means in response to no other negotiate 
messages from access agents in the second 
group for daiming group leadership by sending a 
second-group leader message; and 
means responsive to a second group leader mes- 
sage from the monitor means for joining the sec- 
ond-group. 

12. The apparatus of daim 11 and in addition: 
means In response to a negotiate message for re- 
solving leadership conflict between two or more 
access agents negotiating for group leadership 
whereby the monitor means in the access agent 
winning the conflict sends a group leader mes- 
sage. 

13. The apparatus of daim 8 and In addition: 
means in response to a negotiate message for re- 
solving leadership conflict between two or more 
access agents negotiating for group leadership 
whereby the monitor means in the access agent 
winning the conflict sends a group leader mes- 
sage. 

14. The apparatus of daim 8 and in addition: 
means for detecting a change in WAN identifica- 
tion for the WAN attached to the access group; 
and 

means responsh^e to a change in WAN Identifica- 
tion for reforming the access agents Into one or 
more new groups of access agents having a com- 
mon WAN identifier. 



means for receh^ing the group leader message 
from said monitor means and updating the menr)- 
bership list If the WAN Identifier in the group 
leader message matches the WAN Identifier of 
5 the access agent 

16. The apparatus of daim 14 wherein said reform- 
ing means comprises: 

means, in response to the lack of a group leader 

10 message with a WAN identifier that matches the 

WAN Identifier of the access agent, for sending 
a negotiate message to negotiate for leadership 
of access agents in a second group, each access 
agent In the second group having a common 

IS WAN identifier that is different from the WAN 

identifier in the group leader message; 
means for listening for negotiate message from 
other access agents in the second access group; 
monitor means in response to no other negotiate 

20 messages from access agents in the second 

group for claiming group leadership by sending a 
second-group leader message with the WAN 
identifier common to the second group; and 
means responsive to the second-group leader 

25 message from the nrtonitor means for joining the 

second group. 

17. The apparatus of claim 16 and in addition: 
means In response to a negotiate message for re- 

30 solving leadership conflict between two or more 

access agents negotiating for group leadership 
of the second group whereby the monitor means 
in the access agent winning the conflict sends a 
second-group leader message. 

35 



40 



45 



50 



15. The apparatus of claim 14 wherein said reform- 
ing means comprises: 55 
said monitor means for sending a group leader 
message with a WAN identifier and a new group 
membership list; and 
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FOR INPUT ilNPUT; 
SEE INPUTS INTO THE 
LAN GROUP MGMT 
FIGURE 4 



FOR CONDITION(S) 

C1 C2 08 

SEE CONDITION CODES 
AND DESCRIPTION 
FIGURE 5 
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FIG. 4 



INPUTS INTO THE LAN GROUP MANAGEMENT FSM. 


INPUT 


DESCRIPTION 


i Reset 


RESET SIGNAL THIS SIGNAL IS MOST UKELY 
RECEIVED AS PART OF A GRACEFUL SHUTDOWN 
OF LAN ACCESS AGENT OPERATIONS. 


i HBTImer 


THE TIMER DEFINING THE HEARTBEAT PERIOD 
EXPIRED. IT IS ASSUMED THAT THE KEEP-ALIVE 
TIMER BELOW DEFINES A PERIOD OF 
CONSIDERABLY LARGER LENGTH. 


iKATlmer 


THE KEEP-AUVE TIMER EXPIRED. THIS TIMER 
is MAINTAINED BY EACH ACCESS AGENT OF A 
MAG TO RUN HEALTH CHECKS ON THE CURRENT 
MAA. THE PERIOD DEFINED BY THIS TIMER 
SHOULD BE CONSIDERABLY LONGER THAN THAT 
DEFINED BY THE HEARTBEAT TIMER ABOVE. 
A TYPICAL CHOICE MIGHT BE KATlmer - N* 
HBTImer, N> > 1 


IHNeg 


HELLO MESSAGE OF TYPE NEGOTIATE 


IHMerge 


HELLO MESSAGE OF TYPE MERGE 


IHMAA 


HELLO MESSAGE OF TYPE MAA 
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FIG. 6A 



STATES OF THE LAN GROUP MANAGEMENT FSM 


STATE 


DESCRIPTION 


RESET 


INITIAL STATE THIS STATE IS ONLY 
REENTERED AFTER AN EXPUCIT RESET SIGNAL 
TO THE FSM 


NEGOTIATE 


IN THIS STATE A LAN ACCESS AGENT 
PARTICIPATES IN THE MAA NEGOTIATION 


PENDING 


THE LOCAL ACCESS AGENT HAS RECEIVED 
A HELLO MESSAGE OF TYPE NEGOTIATE 
FROM A PARTNER ACCESS AGENT WHICH IS 
BETTER SUITED TO SELECTED AS THE NEW MAA. 
THE LOCAL ACCESS AGENT THEREFORE 
REFRAINS FROM FURTHER ATTEMPTS 
TO BECOME MAA ITSELF. 


MERGE 


THIS STATE IS ENTERED WHEN A NON-MONITOR 
AA DETECTS THAT MULTIPLE MAAS ARE 
PRESENT ON THE LOCAL U\N. 


ASSIGNED 


WHEN NO DYNAMIC ADAPTATIONS OF THE MAG 
ARE BEING PERFORMED. ALL NON-MONITOR 
ACCESS AGENTS OF A MAG ARE IN THIS STATE. 
IN PARTICULAR THERE EXISTS A SINGLE MAA 
WHICH IS TRANSMITTING PERIODIC HEARTBEAT 
HELLO MESSAGES. 


MAA 


THIS STATE IS RESERVED FOR THE SELECTED 
MONITOR AA 
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ESCRimON OF LOCAL VARIABLES FOR THE MAG FSM. THE INITIAL VALUES ARE 
ASSIGNED AS PART OF LAN ACCESS AGENTS INITIAUZATION PROCEDURE 


INITIAL VALUES 


ADDRESS AS SPECIRED IN 
THE LOCAL CONRGUHATION 
INFORMATION 


ZERO 


IDENTIRER AS SPECIHED IN 
THE LOCAL CONRGURATION 
INFORMATION 


FALSE 


NULL 


NULL 


ARE IDEmiRED AS SUCH BY 
EXPUCITLY MENTIONED HERE 
RELDS OF THE MESSAGE 


DESCRIPTION 


TU ADDRESS OF LOCAL ACCESS AGENT 


IN THE NB30TIATE STATE THIS VARIABLE KEEPS 
TRACK OF THE NUMBER OF CONSECUTIVE 
KEEP-AUVE PERIODS EXPERIENCED IN THIS 
STATE IF THE NUMBER REACHES A PREDERNED 
THRESHOLD THE LOCAL ACCESS AQEhTT ASSUME 
TO HAVE BEEN SELECTED AS MAA 


GROUP IDENTIRER OF THE MAG THIS ACCESS 
AGENT MIGHT BE MEMBER OF (SEE vMEMBER) 


BOOLEAN VARIABLE INDICATES WHETHER THE 
ACCESS AGENT IS MEMBER OF THE MAG 
WHOSE GROUPID IS STORED IN vQraupid 


ADDRESS OF CURRENT MAA OF MAG DENOTED 
BYvGroupid 


MEMBERSHIP UST OF LOCAL MAG 


J WHICH ARE ONLY KEPT FOR SOME TRANSIENT PERIOD 
IXTMP IN THE FOLLOWING FSM DESCRIPTION AND NOT 
R A HELLO MESSAGE IS TRANSMI 1 1 bU, THE PERTINENT 
0 THE VALUE OF THE RESPECTIVE LOCAL VARIABLE. 
















ZD. 


: VARIABLB 
THE PREP 
WHENEVE 




VARIABLES 


Jdress 






is 


address 


)ership_ 




i' 


vRoum 


vGroup 


E 

CO 

i 


vMAA_ 


vMemt 


NOTE 
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nON CODES AND DESCRIPTIONS FOR INPUT 11 


DESCRIPTION 


START KATimer 


1 

fc 
s 


STOP HBTlmer 
START KATimer 


RESET AIL LOCAL VARIABLES TO THBR INRI/ 
SAVE HELLO FIELDS IN LOCAL VARIABLES 
START HBTlmer AND KATimer 
TRANSMR- (HELLO(NEGOTIATE)) 


RESET ALL LOCAL VARIABLES TO THBR INITI/ 
SAVE HBLO RELDS IN LOCAL VARIABLES 
TRANSMIT (HELL0(NEG0T1ATE)) 


1 

1 
1 

UJ 
X, 

t 












eJ ri 'rf 


^ e^j pj 






CODE 




A31 


A32 


A33 


A34 


A35 



20 




21 



EP0 598 674 A1 




22 




23 



EP 0 598 674 A1 



(state o) 



RECV 
iRESET 



20 



FIG. 13 



RESET ALL V. 
START KAtimer 



LISTEN FOR "HELLO" 
MSG ON LAN 



AOO 
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YES 



A20 



A50 



SAVEv 
JOIN START 
KATimer 



RESET V 
START Timers 
SEND iHNeg 



(state 4 ) 
- (STATE 1 ) 



A21 



INCREMENT vROUND 
START KATimer 




^1 



START HBTImer 
SEND iHNeg 



START TIMERS 
SEND IHMAA 
SEND vMem List 



<STATE5) 
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(state 1 > 






RESET V 




ROUNDS 


y — 


START TIMERS 




SEND iHNeg 



A22 




NO 


|NO / 




INCR V Round 




START KATImer 


L y56 





FIG. 14D 

AA3&AA4 




AA4PATH 



TIMERS | -(|W|D 




A51\ 



A23 



SAVEn 
GROUP 
KAT 


/JOIN 

START 

mer 







START TIMERS 
SEND iHMAA 
SEND V MemUst 



A10 



CSTATE 4 ) 



START HBTimer 
SEND iHNeg 



(state 5 ) 
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CSTATES) 



RECV IHMAA 
MESSAGE 



35 



vMAA ADDRESS 
> HELLO.MAA- 
ADDRESS 
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